1. INFRASTRUCTURE SELF-ASSESSMENT (ISA) For public and private stakeholders Chad Fullmer Critical Infrastructure Protection (CIP) Office: (907) 428-7000 Email: chad.fullmer@alaska.gov 12015 Fall Preparedness Conference

2. ‘C’ is for Critical 22015 Fall Preparedness Conference

3. ‘I’ is for Infrastructure 2015 Fall Preparedness Conference3 “Study after study has shown that rebuilding infrastructure is the quickest way to put large numbers of people to work, and the return for each dollar invested in infrastructure renewal is significantly greater than all other investments in the nation’s economy.” Bob Herbert Deferred maintenance - Useable life MOST LOSS ------ vs.------ Infrastructure assessment + renewal BEST ROI

4. ‘P’ is for Protection 2015 Fall Preparedness Conference4 “The caterpillar does all the work, but the butterfly gets all the publicity.” George Carlin

5. Benefits of CI Awareness 2015 Fall Preparedness Conference5 “If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle.” Sun Tzu, The Art of War

6. KNOW YOUR WEAKNESSES Why? (because someone else does) expedite recovery maximize improvements How? prioritize plan 2015 Fall Preparedness Conference6

7. Infrastructure Protection Principles 2015 Fall Preparedness Conference7

8. What is ISA? Infrastructure Self-Assessment (ISA) Purpose: Focus resilience improvement efforts on 1.The most critical vulnerabilities and 2.The widest preparedness gaps Results: 1.Understand 2.Prioritize 3.Act 2015 Full Preparedness Conference8

9. ISA Process: 2015 Fall Preparedness Conference9 PHASE 1: Pre-plan 1) Choose, 2) Coordinate, 3) Map PHASE 2: Prioritize (by Risk) 1) Critical, 2) Important, 3) Peripheral RISK = Probability x Impact PHASE 3: Site Visit 1) Common & restricted areas, 2) Interdependencies/Dependencies, 3) Plans, Processes & Pictures PHASE 5: Take Action 1)Critical, 2) Important, 3)Peripheral Look familiar? Phase 6: Follow Up No new steps – just start over PHASE 4: Re-plan 1) Re-choose, 2) Share, 3) Map

10. Phase 1: Choose 2015 Spring Preparedness Conference10 Tangible Assets Intangible Assets  Reputation  Culture Threats Vulnerabilities PHASE 1: Pre-plan 1) Choose, 2) Coordinate, 3) Map

11. Phase 1: Coordinate 2015 Spring Preparedness Conference11 PHASE 1: Pre-plan 1) Choose, 2) Coordinate, 3) Map

12. 2015 Spring Preparedness Conference12 Phase 1: Map City Hall Public Safety DOT School Airport Water treatment PHASE 1: Pre-plan 1) Choose, 2) Coordinate, 3) Map

13. Phase 2: Prioritize 2015 Spring Preparedness Conference13 PHASE 2: Prioritize (by Risk) 1) Critical, 2) Important, 3) Peripheral RISK = Probability x Impact C. I. P. Probability x IMPACT = RISK

14. Phase 2: Prioritize 2015 Spring Preparedness Conference14

15. Phase 2: Prioritize Identify Threats Natural Human 2015 Spring Preparedness Conference15 PHASE 2: Prioritize (by Risk) 1) Critical, 2) Important, 3) Peripheral RISK = Probability x Impact

16. WHAT’S WRONG WITH THIS PICTURE? Phase 3: Common & Restricted Areas 2015 Fall Preparedness Conference16 PHASE 3: Site Visit 1) Common & restricted areas, 2) Interdependencies/Dependencies, 3) Plans, Processes & Pictures

17. Phase 3: Dependency & Interdependency 2015 Fall Preparedness Conference17 PHASE 3: Site Visit 1) Common & restricted areas, 2) Interdependencies/Dependencies, 3) Plans, Processes & Pictures

18. Phase 3: Plans & Pictures 2015 Spring Preparedness Conference18 Subject Matter Experts (SME) Asset Manager Police/Fire Medical Cyber/IT PHASE 3: Site Visit 1) Common & restricted areas, 2) Interdependencies/Dependencies, 3) Plans, Processes & Pictures

19. Phase 4: Re-plan 2015 Spring Preparedness Conference19 PHASE 4: Re-plan 1) Re-choose, 2) Share, 3) Map 1)Reexamine Plans 2)Share the information 3)Map

20. Phase 5: Take Action Most critical actions first! BASED ON…? 2015 Spring Preparedness Conference20 PHASE 5: Take Action 1) Critical, 2) Important, 3) Peripheral Look familiar? P x I = R

21. Phase 6: Follow Up 2015 Spring Preparedness Conference21 Phase 6: Follow Up No new steps – just start over

22. ISA Process: 2015 Fall Preparedness Conference22 PHASE 1: Pre-plan 1) Choose, 2) Coordinate, 3) Map PHASE 2: Prioritize (by Risk) 1) Critical, 2) Important, 3) Peripheral RISK = Probability x Impact PHASE 3: Site Visit 1) Common & restricted areas, 2) Interdependencies/Dependencies, 3) Plans, Processes & Pictures PHASE 5: Take Action 1) Critical, 2) Important, 3) Peripheral Look familiar? Phase 6: Follow Up No new steps – just start over PHASE 4: Re-plan 1) Re-choose, 2) Share, 3) Map

23. REMEMBER 1.Infrastructure is the best investment. 2.If CIP is done right, nothing happens. – Both success and failure are guaranteed. 3.P + I = R 4.Plan, prioritize, assess, rinse, and repeat. 2015 Fall Preparedness Conference23

24. THE BEGINNING 2015 Spring Preparedness Conference24